$ rpki-client -vvf repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft File: 9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft (raw, json) Hash identifier: B9lYmc4hBmniVEHUPXWO79hw6SmIJf/I6m7OmgVCk1E= Subject key identifier: F2:89:8B:8C:BD:64:CB:E6:25:5F:17:44:02:75:F1:6A:6E:12:7A:98 Authority key identifier: 9A:4F:69:E8:B4:60:63:63:8E:82:F1:FB:06:0A:B3:D7:25:FA:48:21 Certificate issuer: /CN=9A4F69E8B46063638E82F1FB060AB3D725FA4821 Certificate serial: 172364C31D174E2069648FC19E2390E6A4449118 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A4F69E8B46063638E82F1FB060AB3D725FA4821.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft Manifest number: 02B9 Signing time: Wed 02 Jul 2025 17:02:17 +0000 Manifest this update: Wed 02 Jul 2025 16:57:17 +0000 Manifest next update: Sat 05 Jul 2025 19:32:17 +0000 Files and hashes: 1: 9A4F69E8B46063638E82F1FB060AB3D725FA4821.crl (hash: 0Tq1JuCa//dNXUz94MOxerJ3o5uOYRuxGlgA8Lf+zuI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.crl rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A4F69E8B46063638E82F1FB060AB3D725FA4821.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 19:32:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:23:64:c3:1d:17:4e:20:69:64:8f:c1:9e:23:90:e6:a4:44:91:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A4F69E8B46063638E82F1FB060AB3D725FA4821 Validity Not Before: Jul 2 16:57:17 2025 GMT Not After : Jul 5 19:32:17 2025 GMT Subject: CN=F2898B8CBD64CBE6255F17440275F16A6E127A98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:de:5b:a3:28:ea:d9:d3:8b:4e:16:0d:10:3b: 65:a2:a5:85:a0:61:4a:27:9a:80:7c:88:c5:95:e6: 54:b4:f1:3e:aa:15:01:02:af:4c:0b:70:05:66:aa: ee:7d:d3:53:c1:b3:31:35:e7:57:1d:a9:e7:d8:3c: fb:25:d7:9b:b2:8c:97:8c:99:57:23:ff:5f:b1:49: c5:fc:00:07:0a:b7:12:a1:74:8c:3d:1d:a5:10:98: da:65:f7:b9:f3:42:12:c9:62:77:2d:92:08:4c:74: 71:41:18:fc:03:16:aa:ef:d6:56:50:15:56:c7:d0: ce:31:99:4d:65:56:9a:c8:c8:2b:3f:a9:f8:49:14: 3e:10:7d:05:bd:93:6e:b8:e5:73:3d:5d:69:be:9b: 7b:d3:c5:e5:56:72:14:b5:a2:2a:e5:f3:ae:94:3b: 88:62:07:58:7b:24:c0:96:f9:6b:e3:22:56:8d:6c: 9f:38:61:79:7e:47:30:ee:c8:8d:f0:9f:5f:ad:b8: 34:bf:b5:71:e9:2d:d2:fa:1d:15:73:98:ab:41:43: 9a:bf:36:18:67:a4:0c:c9:dd:69:4c:0e:38:1a:46: 0f:1c:ba:72:c9:bb:ca:56:08:95:69:55:9e:78:b9: 25:f5:ba:30:a2:aa:ca:5a:32:f8:cf:cd:6a:ad:95: 55:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:89:8B:8C:BD:64:CB:E6:25:5F:17:44:02:75:F1:6A:6E:12:7A:98 X509v3 Authority Key Identifier: keyid:9A:4F:69:E8:B4:60:63:63:8E:82:F1:FB:06:0A:B3:D7:25:FA:48:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A4F69E8B46063638E82F1FB060AB3D725FA4821.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:62:74:82:b2:1c:a0:57:c2:89:ed:eb:9f:51:dc:d1:86:7a: 7e:c0:10:60:9f:f9:7b:06:35:ee:8b:de:50:b7:c4:e5:b3:4d: 5c:79:ce:ff:9a:f9:99:4a:30:e7:72:d2:a7:00:1a:90:e6:fa: 2f:f0:a4:a8:dc:5a:ee:08:d8:8d:66:1a:ee:b8:bd:30:77:e4: ca:10:a8:ee:2b:8f:a6:3a:60:ab:f9:ff:06:d1:e3:37:9e:07: 71:c7:05:9e:07:f1:6a:2d:12:14:4a:95:72:f7:9f:02:d7:16: f8:31:88:9c:b2:4f:3c:38:75:f7:21:cd:cf:31:51:52:8a:40: e0:10:f8:4c:51:f6:d9:33:67:9a:7e:5d:80:6b:bd:ec:40:d6: ea:82:79:cf:be:93:95:cc:89:2d:30:88:a9:b1:19:b1:be:40: 9f:00:8d:be:d6:b3:53:d6:b0:73:52:e4:a7:90:03:78:a8:85: 0e:51:33:6f:a7:43:aa:5b:4c:5d:e9:45:b2:a4:76:fe:d1:b6: b8:a3:73:0f:01:9b:e8:68:2c:bb:d9:ec:97:48:69:1e:cb:02: 58:7e:3a:e8:49:a0:63:50:36:54:2c:d9:ad:85:54:dc:74:8a: 97:38:35:88:e3:a5:31:c2:8f:44:8f:ff:29:76:1a:20:6e:22: 53:52:67:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFyNkwx0XTiBpZI/BniOQ5qREkRgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE0RjY5RThCNDYwNjM2MzhFODJGMUZCMDYwQUIzRDcy NUZBNDgyMTAeFw0yNTA3MDIxNjU3MTdaFw0yNTA3MDUxOTMyMTdaMDMxMTAvBgNV BAMTKEYyODk4QjhDQkQ2NENCRTYyNTVGMTc0NDAyNzVGMTZBNkUxMjdBOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC63lujKOrZ04tOFg0QO2WipYWg YUonmoB8iMWV5lS08T6qFQECr0wLcAVmqu5901PBszE151cdqefYPPsl15uyjJeM mVcj/1+xScX8AAcKtxKhdIw9HaUQmNpl97nzQhLJYnctkghMdHFBGPwDFqrv1lZQ FVbH0M4xmU1lVprIyCs/qfhJFD4QfQW9k2645XM9XWm+m3vTxeVWchS1oirl866U O4hiB1h7JMCW+WvjIlaNbJ84YXl+RzDuyI3wn1+tuDS/tXHpLdL6HRVzmKtBQ5q/ NhhnpAzJ3WlMDjgaRg8cunLJu8pWCJVpVZ54uSX1ujCiqspaMvjPzWqtlVWNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8omLjL1ky+YlXxdEAnXxam4SepgwHwYDVR0j BBgwFoAUmk9p6LRgY2OOgvH7Bgqz1yX6SCEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NjM4YmQyMS1iZTU2LTQyYjQtODI3OC0wNTQwNWRjZTVlODgvMC85QTRGNjlFOEI0 NjA2MzYzOEU4MkYxRkIwNjBBQjNENzI1RkE0ODIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE0RjY5RThCNDYwNjM2MzhFODJGMUZCMDYwQUIzRDcyNUZB NDgyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDYzOGJkMjEtYmU1Ni00MmI0LTgy NzgtMDU0MDVkY2U1ZTg4LzAvOUE0RjY5RThCNDYwNjM2MzhFODJGMUZCMDYwQUIz RDcyNUZBNDgyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACdidIKyHKBXwont659R3NGGen7AEGCf+XsG Ne6L3lC3xOWzTVx5zv+a+ZlKMOdy0qcAGpDm+i/wpKjcWu4I2I1mGu64vTB35MoQ qO4rj6Y6YKv5/wbR4zeeB3HHBZ4H8WotEhRKlXL3nwLXFvgxiJyyTzw4dfchzc8x UVKKQOAQ+ExR9tkzZ5p+XYBrvexA1uqCec++k5XMiS0wiKmxGbG+QJ8Ajb7Ws1PW sHNS5KeQA3iohQ5RM2+nQ6pbTF3pRbKkdv7Rtrijcw8Bm+hoLLvZ7JdIaR7LAlh+ OuhJoGNQNlQs2a2FVNx0ipc4NYjjpTHCj0SP/yl2GiBuIlNSZzY= -----END CERTIFICATE-----Generated at Thu Jul 3 10:26:48 2025 by rpki-client